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(54) NETWORK BASED IDS 
(57) Abstract: 

PURPOSE: A network based IDS(lntrusion Detection 
System) Is provided to enhance a packet catch 
performance by catching a small size packet in a 
high speed network without a loss and to fast and 
exactly detect the misuse and the abnormal activ.ty 
in the network. 

CONSTITUTION: The system comprises an intrusion 
detect sensor(130) detecting the misuse through the 
pattern matching after collecting the packets by 

connecting to the network, and an intrusion detect |ntrusjon 
server generating a norma, profi.e for each packet co.iecting and 

detect sensor and detecting the abnormal act,v,ty^ The .ntrusio "™L J part detectino 
distributing part collecting anc distributing part with the 
the intrusion ^^"^ part dissembling the packet from the pattern 

:r: n ^ *• - <™ the packet ,i,terino and dissemb,,no 

part to the intrusion detect server. 
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